802.1x wireless RADIUS authentication stopped working - 6273 Audit Failure

[ronnoco]

Hi,

 

We use a combination of Ruckus and Network Policy Server running on 2008R2 to provide 802.1x authentication to our wireless network.

 

For the past year, it has given us very few problems but now, nobody can connect. Always get the same "The RADIUS request did not match any configured connection request policy"

 

We have very little in the way of network policies and connection request policies. Literally the only requirements are that they have wireless ability, are member of the Domain Computers group and use Windows authentication.

 

The computers are logging on to the domain fine therefore it should be passing their AD credentials, they obviously have wireless and they are members of the Domain Computers group. The certificate hasn't expired.

 

I have tried disabling all the policies and it still doesn't work. I have tried rebooting the NPS and the Ruckus box.

 

Does anyone have any idea what is wrong? - here is the full log file :

 

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 21/08/2013 11:26:55

Event ID: 6273

Task Category: Network Policy Server

Level: Information

Keywords: Audit Failure

User: N/A

Computer: nwhserver9.nwhs.local

Description:

Network Policy Server denied access to a user.

 

Contact the Network Policy Server administrator for more information.

 

User:

Security ID: NULL SID

Account Name: NWHS\administrator

Account Domain: -

Fully Qualified Account Name: -

 

Client Machine:

Security ID: NULL SID

Account Name: -

Fully Qualified Account Name: -

OS-Version: -

Called Station Identifier: 54-3D-37-A0-75-18:nwhsatrium

Calling Station Identifier: F0-7B-CB-95-0B-E6

 

NAS:

NAS IPv4 Address: 10.103.20.13

NAS IPv6 Address: -

NAS Identifier: 54-3D-37-A0-75-18

NAS Port-Type: Wireless - IEEE 802.11

NAS Port: 10

 

RADIUS Client:

Client Friendly Name: ZoneDirector

Client IP Address: 10.103.20.13

 

Authentication Details:

Connection Request Policy Name: -

Network Policy Name: -

Authentication Provider: -

Authentication Server: nwhserver9.nwhs.local

Authentication Type: -

EAP Type: -

Account Session Identifier: -

Logging Results: Accounting information was written to the local log file.

Reason Code: 49

Reason: The RADIUS request did not match any configured connection request policy (CRP).

 

Event Xml:

6273

1

0

12552

0

0x8010000000000000

3509381

Security

nwhserver9.nwhs.local

S-1-0-0

NWHS\administrator

-

-

S-1-0-0

-

-

-

54-3D-37-A0-75-18:nwhsatrium

F0-7B-CB-95-0B-E6

10.103.20.13

-

54-3D-37-A0-75-18

Wireless - IEEE 802.11

10

ZoneDirector

10.103.20.13

-

-

-

nwhserver9.nwhs.local

-

-

-

49

The RADIUS request did not match any configured connection request policy (CRP).

Accounting information was written to the local log file.

 

Thanks in advance for any help.

[JJonas]

bump

 

 

anyone?